Juniper Networks NetScreen-5GT Series Datasheet

1 DatasheetPage Juniper Networks NetScreen-5GT SeriesThe Juniper Networks NetScreen-5GT Series is a family of three feature-rich, enterprise-class network security solutions. They are ideally suited for securing remote offices, retail outlets and broadband telecommuter environments, where IT staff support is minimal and ease of configuration and management is crucial. The NetScreen-5GT Series integrates key security applications, routing protocols and resiliency features to provide IT managers a cost effective appliance that is easy to deploy and manage. All NetScreen-5GT Series offerings described below come standard with the following features: Security: Use the Stateful and Deep Inspection firewall, DoS protection and embedded antivirus to stop network and application level attacks and defend against the propagation of worms and viruses.

2 Prevent users from transmitting private or corporate data, via Phishing and Spyware attacks, with integrated or re-direct web filtering options. network integration: Support for key routing protocols, such as BGP, OSPF, RIPv1/2 and ECMP along with NAT, Route and Transparent Layer 2 operation helps facilitate network integration. Resiliency: Dial-backup or dual Ethernet ports, along with route-based VPNs provide redundancy when network connectivity is business critical. Dual WAN ports can also be used to share traffic load. Port Flexibility: Almost every network deployment scenario can be accommodated without a hardware upgrade through five configurable Ethernet interfaces.

3 Administrators can enable switching, dual WAN ports, a dedicated DMZ or any combination thereof through a set of six predefined interface layouts called Port Networks NetScreen-5GT EthernetJuniper Networks NetScreen-5GT Ethernet solution is ideal for environments that need hardwired connectivity backed by robust network , application and payload level security. The NetScreen-5GT Ethernet is available with five Ethernet inter-faces that can be deployed in a wide variety of configurations. Juniper Networks NetScreen-5GT ADSLThe Juniper Networks NetScreen-5GT ADSL adds ADSL con-nectivity to existing Ethernet connectivity, eliminating the need for an external ADSL modem.

4 It provides a cost effec-tive security and ADSL routing platform, with the same key security applications, routing protocols and resiliency features found in the Ethernet-based platforms, to help ensure network resources are not Networks NetScreen-5GT WirelessThe Juniper Networks NetScreen-5GT with Wireless brings enterprise-level security applications, routing protocols and resiliency features to help organizations deploy Networks in a secure manner. The netscreen - 5GT Wireless offers administrators up to four configurable Wireless Security Zones (patent-pending), each with a unique SSID that can be used to provision appropriate levels of security for different types of users.

5 To help ensure wireless security, privacy and interoperability, the NetScreen-5GT Wireless supports a broad set of wireless authentication and privacy mechanisms. The NetScreen-5GT Wireless includes standard Ethernet connectiv-ity with ADSL as a hardware option. 5GT 10 user or plus5GT ADSL 10 user or plus5GT Wireless 10 user or plusScreenOS version supportScreenOS performance(1)75 Mbps3 DES VPN performance20 MbpsDeep Inspection (DI) performance75 MbpsConcurrent sessions2000 New sessions/second2000 Policies100 Interfaces5 10/100 Base-T, 1 Modem, and 1 Console5 10/100 Base-T + ADSL, 1 Modem, and 1 Console5 10/100 ports, 1 Wireless port with up to 4 SSIDs, 1 Modem, and 1 Console, 1 ADSL port (optional),Mode of Operation5GT 10 user or plus5GT ADSL 10 user or plus5GT Wireless 10 user or plusLayer 2 mode (transparent mode)(2)

6 YesYesYes (except with ADSL)Layer 3 mode (route and/or NAT mode)YesYesYesNAT ( network Address Translation)YesYesYesPAT (Port Address Translation)YesYesYesConfigurable port modesYesYesYesDual UntrustYesYesYesDial back upYesYesYesPolicy-based NATYesYesYesMapped IP300300300 Virtual IP444 MIP/VIP GroupingYesYesYesUsers supported10 or UnrestrictedIPSec passthru in NAT modeYesYesYesPage Firewall5GT 10 user or plus5GT ADSL 10 user or plus5GT Wireless 10 user or plusNumber of network attacks detected313131 network attack detectionYesYesYesDoS and DDoS protectionsYesYesYesTCP reassembly for fragmented packet protectionYesYesYesMalformed packet protectionsYesYesYesDeep Inspection (DI) firewall(3)

7 YesYesYesProtocol anomaly detectionYesYesYesStateful protocol signaturesYesYesYesDeep Inspection (DI) signature packs (see table on page 4)YesYesYesContent InspectionYesYesYesMalicious Web filteringUp to 48 URLsExternal Web Filtering (Websense)YesYesYesExternal Web Filtering (SurfControl)YesYesYesBrute force attack mitigation YesYesYesSyn cookie protection YesYesYesDI attack pattern obfuscationYesYesYesZone-based IP spoofingYesYesYesIntegrated Web filteringYesYesYesVPNC oncurrent VPN tunnelsUp to 10 Tunnel interfacesUp to 10 DES (56 bit), 3 DES (168-bit) and AES encryptionYesYesYesMD-5 and SHA-1 authenticationYesYesYesManual Key, IKE, PKI ( )YesYesYesPerfect forward secrecy (DH Groups)1, 2, 51, 2, 51, 2, 5 Prevent replay attackYesYesYesRemote access VPNYesYesYesL2TP within IPSecYesYesYesDead Peer DetectionYesYesYesIPSec NAT traversalYesYesYesRedundant VPN gatewaysYesYesYesVPN tunnel monitorYesYesYesAntivirus/Anti-Spam(4)

8 Embedded Scan EngineYesYesYesAntivirus signatures>80,000>80,000>80,000 ProtocolsPOP3, SMTP, HTTP, IMAP, FTPPOP3, SMTP, HTTP, IMAP, FTPPOP3, SMTP, HTTP, IMAP FTPHTTP Webmail onlyYesYesYesAutomated Pattern file updatesYesYesYesMaximum AV Users(5)10 or 25 depending on user licenseEmbedded Anti-SpamYesYesYesAnti phishing(8) YesYesYesSpyware / Adware / Keylogger ProtectionYesYesYesFirewall and VPN User AuthenticationBuilt-in (internal) database - user limitup to 100up to 100up to 1003rd Party user authenticationRADIUS, RSA, SecurID, and LDAPXAUTH VPN authenticationYesYesYesWeb-based authenticationYesYesYes5GT SeriesLogging/Monitoring5GT 10 user or plus5GT ADSL 10 user or plus5GT Wireless 10 user or plusSyslog (multiple servers)External, up to 4 serversE-mail (2 addresses)YesYesYesNetIQ WebTrendsExternalExternalExternalSNMP (v1, v2)YesYesYesStandard and custom MIBYesYesYesTracerouteYesYesYesAt session start and end YesYesYesVirtualizationVirtual routers (VRs)

9 VLan TaggingYesYesYesRoutingOSPF/BGP/RIPv1/v2 dynamic routing3 instances eachStatic routes102410241024 Source Based Routing, Source Interface Based RoutingYesYesYesEqual cost multi-path routingYesYesYesIGMP groups240024002400 High Availability (HA)HA LiteYes - with Extended License KeyDial Backup(6)YesYesYesDual ALGYesYesYesSIP ALGYesYesYesMGCP ALGYesYesYesNAT for Address AssignmentStaticYesYesYesDHCP/PPPoE/PPPO A clientYes/Yes/NoYes/Yes/YesYes/Yes/Yes (w/ADSL)Internal DHCP serverYesYesYesDHCP relayYesYesYesPKI SupportPKI certificate requests (PKCS 7 and PKCS 10)YesYesYesAutomated certificate enrollment (SCEP)YesYesYesOnline Certificate Status Protocol (OCSP)YesYesYesSelf Signed CertificatesYesYesYesCertificate Authorities SupportedVerisign, Entrust, Microsoft, RSA Keon, iPlanet (Netscape), DOD PKI, BaltimoreRADIUS AccountingRADIUS Start/Stop YesYesYesSystem ManagementWebUI (HTTP and HTTPS)YesYesYesCommand Line Interface (console)YesYesYesCommand Line Interface (telnet)YesYesYesCommand Line Interface (SSH)

10 Yes, and compatibleNetScreen-Security ManagerYesYesYesAll management via VPN tunnel on any interfaceYesYesYesRapid deploymentYesYesYesDatasheetPage Administration5GT 10 user or plus5GT ADSL 10 user or plus5GT Wireless 10 user or plusLocal administrators database202020 External administrator databaseRADIUS/LDAP/SecurIDRestricted administrative networks666 Root Admin, Admin, and Read Only useYesYesYesSoftware upgradesTFTP/WebUI/SCP/NSMC onfiguration Roll-backYesYesYesTraffic ManagementGuaranteed bandwidthYes Yes Yes Maximum bandwidthYes Yes YesIngress Traffic PolicingYesYesYesPriority-bandwidth utilizationYesYesYesDiffServ stampYesYesYesADSL SupportADSL over POTSN/AYesYes (optional)ADSL over ISDNN/AYesYes (optional)ADSL DMT issue 2N/AYesYes (optional)ADSL G lite Yes NoN/AYesYes (optional)Dying Gasp SupportN/AYesYes (optional)Deutsche Telecom SupportN/AYesYes (optional)ADSL Layer 2 and encapsulationsPPPoE/PPPoAN/AYesYes (optional)